Static task
static1
Behavioral task
behavioral1
Sample
1382a88bf0a3957a450c7e8e9f611e5a6218b95369910bcee30680c035b0d567.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1382a88bf0a3957a450c7e8e9f611e5a6218b95369910bcee30680c035b0d567.exe
Resource
win10v2004-20240508-en
General
-
Target
1382a88bf0a3957a450c7e8e9f611e5a6218b95369910bcee30680c035b0d567
-
Size
4.4MB
-
MD5
cfd850095af556eedb212385111e7feb
-
SHA1
5e1c084f19d54b34d18f5a6ba9f9309d4235a8eb
-
SHA256
1382a88bf0a3957a450c7e8e9f611e5a6218b95369910bcee30680c035b0d567
-
SHA512
4700b5d3d0841b163a8cd0f8fa0858bb8019d3cfc9a8c6d092fd02b9ae74277f68333bba90db27d3d35b8ff26521fe775ea9c51ee30e83f5ac2a0f006b528c98
-
SSDEEP
98304:ElxMiWLG3NhM8wwmlewkCsGNMUG7OqobCDb0hYq2GPE0/2fwj8bbbbba:cf3nM8wwmblLyOqECDnmYw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1382a88bf0a3957a450c7e8e9f611e5a6218b95369910bcee30680c035b0d567
Files
-
1382a88bf0a3957a450c7e8e9f611e5a6218b95369910bcee30680c035b0d567.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ